browser-intent

SUSPICIOUS: the skill is purpose-aligned and uses an official npm-distributed dependency, but it materially expands risk by combining untrusted web content, external LLM routing, and autonomous browser actions. The documented loopback proxy and graceful degradation are positive signals, so this is not confirmed malware; overall risk is medium due to prompt-injection and action-execution exposure.